Quentin Hardy of the New York Times shows how it all works,
“His technology confirms who you are by combining the private security “keys” of several devices, which are then encrypted in a “blob” in a remote data center. Supposedly your personal information, including your name and address, passwords and credit card data, cannot be obtained there, either. When you want to log on to a Web site, OneID checks the security of the site, then determines who you are by confirming three different digital signatures on different devices. Merchants never see your credit card information but receive a clearance from OneID.”
It’s a great idea, seems to work, and has one very big hurdle: adoption, as Rip Empson of Techcrunch explains,
“for OneID to work, it’s going to need a significant user base, because there isn’t a whole lot of value for other sites in adding this tech, even if it’s something consumers are dying for. According to Kirsch, OneID is currently live on over 1,000 sites (that reach over 100 million users), and we can expect that the new leadership to focus on adding zeroes to that number.”
OneID has novel ways of reminding you just how bothersome password IDs and filling in personal information in form after form can be. One contest on form filling, called form-fill fury, pits you against the clock: how many seconds do you waste before you finish? With OneID, that chore is history. Another, Memory Madness, tests your ability to remember a password.